CVE-2017-12253
HighSummary
A vulnerability in the Cisco Unified Intelligence Center allows an unauthenticated, remote attacker to execute unwanted actions. The issue is due to a lack of cross-site request forgery (CSRF) protection.
Risk Assessment
An attacker could exploit this vulnerability by tricking the user of a web application into executing an adverse action, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to implement appropriate CSRF protection mechanisms and regularly update Cisco software to mitigate this vulnerability.
Other vulnerabilities in Cisco Unified Intelligence Center
See all- CVE-2026-20327Medium
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack against an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to read the contents of the internal database of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.
- CVE-2025-20377Medium
A vulnerability in the API subsystem of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to obtain sensitive information from an affected system. This is due to improper validation of requests to certain API endpoints. An attacker could exploit this by sending a valid request to a specific API endpoint.
Original NVD description (English source)
A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of cross-site request forgery (CSRF) protection. An attacker could exploit this vulnerability by tricking the user of a web application into executing an adverse action. Cisco Bug IDs: CSCve76872.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS